Robinhood knowledge breach is dangerous, however we have seen a lot worse

Robinhood data breach is bad, but we've seen much worse

No establishment is just too large to fail.

Andrew Brookes/Getty Photographs

It looks like there is a new knowledge breach within the information each couple of weeks. The most recent large safety hack got here from inventory buying and selling app Robinhood, which says the information from about 7 million person accounts was compromised. Robinhood, no stranger to controversy after final spring’s GameStop saga, says it was largely electronic mail addresses leaked, and that essentially the most delicate and in depth knowledge was solely leaked for about 300 prospects.

Learn extra: Yet one more knowledge breach: Is your password on the darkish internet now?

In case you weren’t one of many tens of millions affected by the Robinhood breach, chances are high your knowledge’s been spilled in one other hack sooner or later. The extra our lives turn out to be digital and we depend on know-how every day, the extra our data is in danger to some extent to hacks, scams and breaches. Hackers can make the most of any vulnerability — a well being disaster, loopholes in establishments’ servers and options, or flawed safety protections — to steal your private and delicate data like bank card numbers, Social Safety knowledge, birthdates, electronic mail addresses and extra. Compromised knowledge can go away you weak to bigger issues like identification theft.

Although you’ll be able to’t foresee a selected assault, you’ll be able to actually take steps to guard your self from additional hurt by avoiding scams and being vigilant about monitoring your credit score and your bank card prices.

Listed below are some, although not all, of the most important knowledge breaches, hacks, scrapes and fumbles the US has skilled in current historical past.


Robinhood stock trading

James Martin/CNET

When: Nov. 3, 2021

Variety of folks affected: 7 million prospects had their private data uncovered, with various quantities and forms of knowledge leaked. Robinhood says most affected customers had their electronic mail addresses and/or names uncovered. Solely about 300 customers had their names, dates of delivery and ZIP codes leaked. “Extra in depth account particulars” have been compromised for about 10 prospects.

What occurred: Robinhood launched an announcement saying Nov. 8 saying there had been a knowledge breach Nov. 3 that had since been contained. The assertion additionally talked about that the occasion accountable had demanded cost in an extortion try. 

“As a Security First firm, we owe it to our prospects to be clear and act with integrity,” mentioned Caleb Sima, Robinhood’s chief safety officer.



SOPA Photographs/Getty Photographs

When: April 2021

Variety of folks affected: Knowledge reportedly scraped from 500 million profiles; an extra 2 million information have been leaked as proof

What occurred: Malicious actors put an archive of information up on the market containing scraped data from 500 million LinkedIn profiles, in line with a report from Cyber Information. A further 2 million information have been leaked as proof. Info within the archive included customers’ full names, electronic mail addresses, cellphone numbers, office data and extra.  

“This was not a LinkedIn knowledge breach, and no personal member account knowledge from LinkedIn was included in what we have been in a position to evaluation,” LinkedIn mentioned in an announcement on April 8. Within the publish, the corporate mentioned that the information set was “an aggregation of information from plenty of web sites and firms” and that it included publicly viewable member profile knowledge apparently scraped from LinkedIn.



Sarah Tew/CNET

When: Posted to low-level hacking discussion board April 3, 2021

Variety of folks affected: Over 530 million folks

What occurred: Private data together with names, delivery dates, cellphone numbers and extra for 530 million Fb customers was posted to a hacker web site on April 3. A Fb spokesperson tweeted that the dataset was from 2019, which implies the information was technically scraped. Nonetheless, Alon Gal, CTO of cybercrime intelligence agency Hudson Rock — who initially found the information set in January — tweeted that the data may nonetheless be of curiosity to hackers and scammers.

Unhealthy actors have been in a position to scrape the information by means of a Fb function that the social media web site mentioned has since been secured, in line with a Fb weblog publish



Justin Tallis/Getty Photographs

When: Disclosed Might 2020

Variety of folks affected: Over 9 million prospects

What occurred: EasyJet, an airline based mostly within the UK, reported that electronic mail addresses and journey data for greater than 9 million prospects have been compromised in a “extremely subtle” cyberattack. Hackers additionally gained entry to the bank card data of two,208 prospects. EasyJet mentioned it is engaged on contacting prospects whose data was uncovered within the breach. 

The airline mentioned it took instant motion after it realized of the assault by notifying the Nationwide Cyber Safety Centre and the ICO, the UK’s knowledge safety watchdog. The ICO will examine whether or not EasyJet ought to be fined underneath Europe’s Common Knowledge Safety Regulation (GDPR).



Rafael Henrique/Getty Photographs

When: Disclosed by Marriott Worldwide on March 2020

Variety of folks affected: Roughly 5.2 million visitors

What occurred: Marriott worldwide mentioned that on the finish of February it realized an “sudden quantity” of visitor data could have been accessed with the login credentials of two staff at a franchise property. The uncovered data could embrace names, addresses, emails, cellphone numbers and birthdays. Loyalty account particulars and knowledge like room preferences may additionally have been breached. That is the second main incident to influence the lodge within the final two 12 months years. 

MGM Resorts


Rebecca Ang/ Getty Photographs

When: Disclosed to public early February 2020

Variety of folks affected: Greater than 10.7 million visitors

What occurred: CNET’s sister web site ZDNet reported that the private data of over 10 million former MGM resort visitors was printed on a hacking discussion board. The data shared got here from a safety incident final 12 months, MGM safety group members informed ZDNet. The leaked information included particulars like prospects full names, residence addresses, cellphone numbers, electronic mail addresses and birthdates. 

MGM informed ZDNet that it was assured no monetary, cost card or password knowledge was concerned. The lodge chain reportedly notified all affected visitors and has since improved its community safety. 

MGM’s accommodations embrace the Bellagio, Aria, MGM Grand, Mandalay Bay, Park MGM, Mirage, New York New York, Luxor and Excalibur in Las Vegas.

Learn extra: Tips on how to shield your self in a knowledge breach in case your financial institution will get hacked

Phrases With Associates 

Words with Friends


When: September 2019

Variety of folks affected: Greater than 200 million gamers

What occurred: A hacker accessed greater than 218 million Phrases With Associates participant accounts earlier than Sept. 2. The database that the hacker, Gnosticplayers, accessed included knowledge from Android and iOS gamers who’d put in the sport previous to Sept. 2. Gnosticplayers accessed data like gamers’ names, electronic mail addresses, login IDs and extra. On Sept. 12, the sport’s writer, Zynga, confirmed a knowledge breach for Draw One thing and Phrases with Associates gamers had occurred. In an announcement, the writer mentioned the investigation is ongoing and it has taken steps to guard accounts.


In this photo illustration the DoorDash logo is seen

SOPA Photographs/Getty Photographs

When: Sept. 26, 2019

Variety of folks affected: 4.9 million prospects, drivers and retailers

What occurred: DoorDash, the favored meals supply service, confirmed that it suffered a knowledge breach that affected nearly 5 million customers. The corporate specified that customers who signed up after April 5, 2018, weren’t affected. 

An investigation into the breach decided that data like names, electronic mail addresses, supply addresses, order historical past, cellphone numbers and passwords was accessed. The corporate mentioned that the final 4 digits of some customers’ bank cards and checking account numbers have been additionally accessed. 

The meals supply firm mentioned it turned conscious of suspicious exercise with a third-party service supplier earlier this month. The investigation found that an unauthorized third occasion accessed some person knowledge in early Might.



MoviePass left prospects’ bank card numbers and bank card particulars uncovered


When: Aug. 20, 2019

Variety of folks affected: Tens of 1000’s of customers and greater than 160 million information

What occurred: A report from cybersecurity firm SpiderSilk, obtained by TechCrunch, discovered that 160 million MoviePass information have been left unencrypted. As a result of the corporate’s database wasn’t password-protected, it left prospects’ bank card numbers and bank card particulars uncovered. The database remained on-line till Tuesday. MoviePass did not instantly reply to a request for remark.

This is not the primary time MoviePass has landed in sizzling water. Earlier, the service confronted criticism for altering passwords to maintain customers from ordering tickets. The corporate has additionally been accused of spiking costs at peak occasions. Final 12 months, the corporate was mentioned to be reactivating accounts and asking former prospects to choose out of being subscribed once more. 

Capital One 

Capital One Financial's offices in San Francisco

Capital One Monetary’s workplaces in San Francisco

Stephen Shankland/CNET

When: July 30, 2019

Variety of folks affected: 100 million folks

What occurred: Monetary company Capital One suffered a knowledge breach that affected 100 million bank card functions, 140,000 Social Safety numbers and 80,000 checking account numbers. In case you utilized for a card within the US between 2005 and 2019, you are seemingly a part of the breach, in line with the financial institution. 

Capital One mentioned that no bank card account numbers or login credentials have been uncovered. The breach nonetheless affected names, addresses, ZIP codes, cellphone numbers, electronic mail addresses and delivery dates. The FBI arrested Paige A. Thompson, a tech employee who goes by the nickname “erratic.” Thompson was charged with laptop fraud and abuse for the hack. 

Capital One has reached out to affected prospects, however within the meantime, you’ll be able to take steps to observe your accounts for fraud



You possibly can nonetheless examine to see if you happen to have been affected by this hack.

SOPA Photographs/Getty Photographs

When: A number of months in mid-2017

Variety of folks affected: About 143 million folks

What occurred: Hackers stole buyer names, Social Safety numbers, birthdates and addresses in a hack that stretched for 3 months. As well as, hackers nabbed 209,000 bank card numbers and 182,000 paperwork containing private data. It is unclear what the hackers did with the information throughout that point. The corporate estimates that half of the US inhabitants was affected, however that does not embrace victims outdoors the nation. It was the most important identified leak of 2017. 

You possibly can nonetheless examine to see if you happen to have been affected, worthwhile since you would possibly get reimbursed for it. The credit score reporting firm agreed to pay between $575 million and as much as $700 million on July 22 as a part of a settlement with the Federal Commerce Fee.  



The Starwood Resorts group, purchased by Marriott in 2014, was hit by a hacking marketing campaign. 

Roberto Machado Noa/Getty Photographs

When: 2014-2018

Variety of folks affected: 383 million

What occurred: Malware contaminated the safety methods of Starwood Resorts — which incorporates Sheraton, W Resorts, Westin, Le Meridien, 4 Factors by Sheraton, Aloft and St. Regis — in 2014, and the Marriott lodge group then acquired Starwood in 2016. In November 2018, Marriott found and revealed a four-year hacking marketing campaign that attacked Starwood’s reservation database. Lawmakers demanded knowledge privateness and safety protections going ahead.

The five hundred million visitors initially regarded as affected was lowered to 383 million in January. Along with names, addresses, cellphone numbers, bank card data and electronic mail addresses, hackers additionally swiped tens of millions of unencrypted passport numbers



Fb was the sufferer of one of the crucial notorious hacks ever.

Angela Lang/CNET

When: 2016-2018

Variety of folks affected: 87 million

What occurred: Fb’s Cambridge Analytica scandal is not the latest or the most important, but it surely’s arguably essentially the most notorious. In a nutshell, the favored social media web site was tricked by researchers who gained entry to Fb person knowledge. The researchers then misused the information for political adverts through the 2016 US presidential election. 

The variety of folks whose knowledge was compromised shortly rose to 87 million by April 2018.

The information agency was additionally linked to then-presidential candidate Donald Trump. Trump’s marketing campaign employed Cambridge Analytica to run knowledge operations through the 2016 election. Steve Bannon, who would turn out to be Trump’s chief strategist, was additionally reportedly vp of Cambridge Analytica’s board. The corporate helped the marketing campaign determine voters to focus on with adverts, and gave recommendation on how finest to focus its strategy, equivalent to the place to make marketing campaign stops. It additionally helped with strategic communication, like what to say in speeches.


Anthem Health Insurance

Anthem needed to pay $115 million to settle a knowledge breach class motion lawsuit. 

Aaron P. Bernstein/Getty Photographs

When: 2015

Variety of folks affected: 80 million

What occurred: The hackers that infiltrated Anthem Insurance coverage swiped the names, dates of delivery, member IDs, Social Safety numbers, addresses and extra of virtually 80 million present (on the time) and former staff. Shortly after the hack was revealed, attorneys normal accused Anthem of failing to speak the gravity of the scenario to prospects. In June 2017, Anthem agreed to pay $115 million to settle the information breach class motion lawsuit from the 2015 hack.  


Yahoo getty

None of Yahoo’s 3 billion accounts had gone unscathed within the authentic breach.

SOPA Photographs/Getty Photographs

When: 2013- 2014

Variety of folks affected: 3 billion

What occurred: Yahoo customers have been urged to alter their passwords after hackers stole private data related to about half a billion electronic mail accounts. On the time, the numbers made it the most important knowledge breach in historical past. Initially, the casualties have been reported at 500 million, nonetheless making the hack the most important in historical past. Yahoo slowly raised the quantity however reported in 2017 that none of its 3 billion accounts had gone unscathed within the authentic breach. That is 3 billion names, electronic mail addresses, phone numbers, dates of delivery, encrypted passwords and unencrypted safety questions. 

The perpetrator? A 23-year-old Russian hacker-for-hire named Karim Baratov. Baratov was sentenced to 5 years in jail, paid the victims restitution and $2.25 million in fines. Yahoo did not go with out punishment both. The corporate needed to pay $50 million in damages and supply credit score monitoring for a minimum of two years for about 200 million individuals who’d been hacked.

Learn Extra: The very best identification theft safety and monitoring providers

Correction, Sept. 27, 2019: An earlier model of this story incorrectly acknowledged the extent of the DoorDash safety situation. The corporate turned conscious of suspicious exercise this month, resulting in the invention of a single breach in Might.

Now playing:
Watch this:

Capital One data breach: Here’s what to do


Leave a Reply

Your email address will not be published. Required fields are marked *

Related Posts